CVE-2019-12359

CVE-2019-12359 concerns ZZCMS (2019 version) with a SQL injection vulnerability in the admin module. Specifically, /admin/ztliuyan_sendmail.php is vulnerable via the id parameter when the attacker has admin authority, enabling manipulation of the database (as indicated by the vulnerability descri...

CVE-2019-12359

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyansendmail.php when the attacker has admin authority via the id parameter...

CVE-2019-12358: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendsms.php when the attacker has dlsprint authority via a dlid cookie...

CVE-2019-12359: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyansendmail.php when the attacker has admin authority via the id parameter...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/dlsendmail.php...

CVE-2019-12352: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dlsendmail.php when the attacker has dlsprint authority via a dlid cookie...

CVE-2019-12355: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsprint.php when the attacker has dlsprint authority via the id parameter...

CVE-2019-12357: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php when the attacker has admin authority via the id parameter...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/ztliuyansendmail.php...

CVE-2019-12353: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dlsendmail.php when the attacker has admin authority via the id parameter...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsdownload.php...

CVE-2019-12354: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php when the attacker has admin authority via the id parameter...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by attackers to perform SQL injection attacks via the id parameter in /admin/deluser.php...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsprint.php...

CVE-2019-12356: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dlsdownload.php when the attacker has dlsdownload authority via the id parameter...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/showbad.php...

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2019, which stems from a SQL injection issue via dlid cookie in /dl/dlsendsms.php. No detailed vulnerability details are currently available...

ZZCMS SQL注入漏洞

zzcms Webmaster Merchants Content Management System, developed by the zzcms team, incorporates database optimization, content caching, AJAX and other technologies to make the site's security, stability, and load capacity is reliably guaranteed. The source code is open and the functional modules a...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56481)

ZZCMS is a content management system CMS by the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of single quotes in the id parameter of /admin/dlsendsms.php. No detailed vulnerability details are currently available...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56480)

ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dldownload.php. No detailed vulnerability details are provided at this time...